
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: bgShWT746kYJOaT/yMfZXsnNmkeHbWwBfPwQHNOAJZM=
Subject key identifier: 2F:0B:FF:A6:C9:82:F3:1B:31:84:60:E6:B9:36:2E:38:0D:08:D4:48
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 2852
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 27E3
Signing time: Tue 28 Jul 2026 15:44:40 +0000
Manifest this update: Tue 28 Jul 2026 15:44:39 +0000
Manifest next update: Tue 04 Aug 2026 15:44:39 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: o+SETLDLiT8foyyCerD15zs75D/OTpy/g8cEycSsGK8=)
2: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
3: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: xnraMRAht75c6q0k/IWf70uaiaEKUbaOlcnjW+8YMmY=)
4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10322 (0x2852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Jul 28 15:44:39 2026 GMT
Not After : Aug 4 15:44:39 2026 GMT
Subject: CN=6a68ce68-e06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:98:bc:0d:d8:73:d1:f4:a4:c2:6b:75:23:
7b:f1:1b:b0:40:93:aa:9e:80:68:61:9e:ff:fe:9a:
cf:f5:66:3a:f7:c5:d4:a9:08:c4:89:b6:93:94:b6:
e3:3a:6e:d3:3c:25:cf:40:37:53:3d:4c:73:b5:38:
5c:61:06:54:72:3a:76:7e:98:e9:5b:4f:0b:24:68:
84:4d:13:37:d2:5b:00:aa:c7:22:a8:8b:be:f2:47:
8f:a2:0b:82:ce:9a:d8:98:ec:cd:25:d4:f9:13:39:
f5:31:8a:50:26:b4:2c:ec:fd:86:f2:87:c4:44:9e:
ee:d3:bb:a1:f4:ad:b5:d7:bf:d3:16:8d:00:c9:66:
cc:bb:1a:92:fa:7b:73:cf:6f:ef:7f:cc:68:23:e7:
0d:d1:79:aa:fc:0b:cb:ca:1e:c4:d8:af:a3:d7:90:
56:d0:5b:3b:cc:2a:81:da:3f:ed:c3:3f:aa:00:94:
a2:44:25:cb:6b:d8:e4:39:a5:2d:55:c9:24:03:b3:
b3:46:e7:d8:6d:42:59:64:49:ff:3c:0d:aa:fd:34:
d1:ac:13:8b:6b:9e:45:fb:ad:3c:bb:d2:66:f7:e6:
52:42:c0:83:56:1e:71:39:3b:d0:62:74:47:37:cc:
cc:a9:74:78:ed:e7:9f:73:0c:f1:17:00:1e:a3:59:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:FF:A6:C9:82:F3:1B:31:84:60:E6:B9:36:2E:38:0D:08:D4:48
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:45:82:f2:d5:41:a0:89:59:b4:81:d5:b2:df:29:fb:7f:99:
b3:01:8c:bb:3c:2f:a7:90:63:fc:e4:88:93:ab:ea:36:7d:0c:
68:b5:1a:ff:c4:55:57:dd:48:50:6a:2b:6b:d6:4c:9f:0b:ac:
78:75:5f:78:11:42:2d:a9:f9:5b:73:20:92:fb:78:6b:9b:a2:
1e:4a:f6:d6:c7:27:4d:c4:65:0d:75:c5:4f:a8:aa:0c:51:87:
79:e8:d6:5a:e4:ca:0a:7a:06:62:56:a3:e6:29:74:92:6a:76:
c4:0f:ec:27:72:8f:c4:70:c9:84:56:da:67:50:d1:94:e3:53:
b1:eb:45:e9:69:a4:fe:e5:c3:46:3e:31:99:0f:c3:4a:de:dc:
ea:cd:6e:43:05:8a:dd:d1:30:1d:11:46:40:59:cb:9d:e9:49:
8d:cb:df:8e:e5:aa:e4:ca:a0:46:bc:92:0e:84:b8:25:c0:de:
5c:be:38:97:ec:a5:5b:77:ec:be:e5:d5:33:52:8d:e7:20:a1:
d7:7f:94:68:9d:0c:d2:a0:93:f9:cd:c5:63:b5:d1:2a:bd:06:
7b:96:53:74:30:3d:af:78:59:85:79:a4:ce:9c:33:f6:58:22:
5d:42:80:cc:c0:d7:d9:16:ee:f3:88:ce:22:de:8c:00:3b:81:
d6:75:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:13 2026 by rpki-client